SportLive Privacy Policy

Website demo request form

The full name and mobile number you enter in the website demo request form, how you would like us to reach you (WhatsApp or phone), the optional gym name, gym type and your email address, and the language you filled the form in are processed by Melih Güçlü to answer your demo request. The request is handled and stored on our own servers in Türkiye. To prevent abuse, the time taken to fill in the form and a digest derived from your IP address are also recorded; your IP address itself is not stored. When a new request arrives, our team is sent an email that only says a request arrived and contains no personal data. Your details are used only to contact you about your demo request; you are not added to a marketing list. Demo requests are kept for 90 days and then deleted. You can send requests for access, correction or deletion concerning your request to info@piklos.com.

The app and responsibilities

SportLive (com.piklostudio.megspor) is a mobile app developed by Melih Güçlü for gym members and authorised staff. The Google Play developer account is registered under the name MEG Digital. Privacy contact: info@piklos.com.

The app connects to the account of the gym you choose. The gym manages membership, work and service records for the purposes of its own business. Melih Güçlü provides the technical service for the app and its servers and carries out the processing needed for support requests and the security of the service. The gym’s own disclosure notice explains the gym-specific processing and retention details.

Data processed and its purposes

• Identity and contact: name, user ID, email, phone; date of birth and emergency contact details where entered in the gym’s records. Used for account access, membership and communicating with you.
• Health and fitness: height, weight, body measurements, body fat, muscle mass, training programme, exercise logs and related notes. Measurements can be entered by the gym; you can also enter your own measurements in the app if you wish. Processed for the training and progress tracking the gym offers. Authorised staff access is managed by the gym.
• Service and financial records: packages, remaining sessions, appointments, attendance, balance, instalments, collections and refund history. Staff can reach till, payroll, bonus, shift and business records according to their permissions. The app does not collect bank card numbers or CVVs; the amount and method of a card payment may appear in the records.
• Photos and documents: the profile photo you choose or take is uploaded to be shown on your account. Authorised staff can upload member and staff photos, task-completion photos and business documents (photos, PDFs or e-invoice XML files) from the app. The app only reads and uploads the image or file you select or capture.
• Location (staff only): if the gym has turned on location verification for shifts, when the employee starts and ends a shift the app reads the device location once, while the app is open, and sends it to the server to check whether the employee is inside the gym’s location area. The server does not store the coordinates; the shift record notes the distance to the gym, the location accuracy and the result of the check. An authorised employee can save the device’s current location as the gym’s location while setting up the gym’s location area. The app does not track location in the background and does not ask members for location.
• Session and notifications: session tokens, device name, model, operating system and app version, plus the push token when you grant notification permission; used for secure sign-in, session management and service notifications.
• Content reports: when you report a photo or text on a trainer profile, the reason you choose and your optional note are forwarded to the gym’s management together with your name. The gym reviews the report and corrects or removes the content.
• Transaction and technical records: sign-ins, session requests, exercise logs, document approvals, notification read state and server access and security logs. Processed to run the service, investigate errors and keep the service secure.

Device permissions

• Camera: used to scan the gym’s QR code and to take profile, member and staff photos, task-completion photos and document photos. While a QR code is scanned, no image is recorded or uploaded; only the photo you take is uploaded.
• Photos: used only to upload the image you select.
• Location (staff only): requested only while the app is in use, for the shift verification and gym location setup described above. “Always” location permission is never requested.
• Notifications: optional and can be turned off in the device settings.

The app does not request microphone, contacts, Face ID or motion data access. Apart from the feature you decline, the rest of the app keeps working.

Where data is stored and how it is transferred

Account, gym and file records are stored on our servers in Türkiye. Authorised gym staff can reach the data within the scope of their duties and access permissions.

Expo together with Apple’s and Google’s notification infrastructures are used to deliver notifications to your device; the push token and notification text are processed abroad in this delivery. Sign-in code and service emails are sent through our own mail server in Türkiye.

In this version of the app, crash reporting and usage analytics services are not enabled. The app contains no ad network or behavioural ad tracking; personal data is not sold for advertising. Data may be disclosed to the competent authorities when legally required.

Security and retention

Session tokens are kept in the device’s secure storage infrastructure and separated by gym and account type. Access and transaction permissions are verified on the server. No technical measure is an absolute guarantee of security.

Gym records are kept for as long as needed to run the relevant service and to meet applicable legal obligations. The exact period depends on the record type and the gym’s obligations. Removing the app from the device does not delete the records on the server; use the “Account deletion” steps below to delete them.

Account deletion

Members can delete their accounts in the app: Profile → My account → Delete my account. With your confirmation the following data is deleted immediately:

• the email and phone details and sign-in codes on your app account,
• your push tokens and the device details on your sessions,
• the profile photo you uploaded from the app,
• the measurements you entered yourself and your in-app notification inbox,
• the gender, date of birth, height, weight, goal and emergency note on your app profile.

Your sessions on every device are closed and the device is signed out; a deleted account cannot sign in again. Only your name and the deletion date remain in the account record so the gym can conclude the deletion request.

Your membership, package, payment, instalment, session and check-in records are the gym’s commercial records; they stay with the gym for the legal retention period. The app forwards a deletion request to every gym you are connected to. The gym deletes or anonymises your records that it has no obligation to keep within 30 days at the latest.

Staff send a deletion request in the app via Account → Delete my account. Because shift, till and payroll records are tied to the gym’s operations, the request is forwarded to the gym owner and the account stays open in the meantime. When the gym owner closes the account, sign-in and all sessions end; deletion of the other personal data linked to the account can be requested separately from the gym or from info@piklos.com. A gym owner’s request is passed to us because it closes the gym’s whole account; we contact you about handing over records and the records that must be kept by law. Staff requests are concluded within 30 days at the latest.

If you cannot sign in to the app or you are using an old version, you can write to us using the steps on the Account deletion page.

Underage users

SportLive can be used by gyms serving different age groups. The necessary parent or legal representative processes for underage people’s membership, permissions and health/fitness records are handled by the gym concerned. Legal representatives can contact the gym or Melih Güçlü for privacy and deletion requests.

Requests and updates

For access to your personal data, correction, deletion and your other applicable rights, you can apply to your gym or to info@piklos.com. To protect third parties’ data, we may verify the applicant’s identity by an appropriate method. Do not send a password, one-time sign-in code or bank card details. Changes to the policy are published on this page with an update date.